Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9016E9F6553E11ED941CB7C9F1222468.roa
File:                     9016E9F6553E11ED941CB7C9F1222468.roa (raw, json)
Hash identifier:          hljB8YgiGFkQOMiXArTGA1XvNPYHtkdTxjwfCw5g7TA=
Subject key identifier:   F3:3C:A3:1A:62:2A:28:01:A7:0F:95:24:B2:A5:D6:19:6B:75:2C:D2
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0A7F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9016E9F6553E11ED941CB7C9F1222468.roa
Signing time:             Wed 26 Oct 2022 14:57:51 +0000
ROA not before:           Wed 26 Oct 2022 14:57:48 +0000
ROA not after:            Sat 26 Oct 2024 14:57:48 +0000
asID:                     61317
IP address blocks:        154.127.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2687 (0xa7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct 26 14:57:48 2022 GMT
            Not After : Oct 26 14:57:48 2024 GMT
        Subject: CN=63594aef-56f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:71:23:f5:f3:66:6d:e3:e8:8d:49:22:52:
                    ad:04:2c:03:ef:cf:20:38:17:f6:fb:03:d6:07:12:
                    8f:25:7e:b5:d5:7d:90:f0:89:e8:e7:12:bf:23:2f:
                    86:5e:9f:d3:ab:ed:c7:55:01:c0:d6:dd:f3:1b:11:
                    18:0b:b1:3b:ba:21:31:4c:73:8c:13:16:28:b5:aa:
                    73:d0:ee:61:a7:2e:a2:f6:ab:f0:2d:2e:c7:f8:21:
                    16:de:12:35:67:19:92:e0:e2:20:d7:ec:ba:9b:fb:
                    c9:43:55:6d:e4:f2:13:81:64:97:2e:fd:04:e6:41:
                    d5:40:89:ea:47:18:6c:37:51:71:19:16:e0:d8:ec:
                    1a:f7:82:6f:a9:be:65:92:37:5d:ac:8d:ba:18:c7:
                    45:1f:78:d2:b3:0c:83:00:5d:11:19:94:df:01:b2:
                    c3:cc:a3:0d:f9:eb:4a:46:a1:87:8e:dc:33:8b:15:
                    0c:2b:63:95:5b:69:31:3a:de:58:7a:b7:61:6e:3d:
                    6f:37:40:0b:78:f3:15:41:34:bc:b4:1e:bc:af:75:
                    a1:32:79:5e:0f:ad:33:f3:e8:8f:95:6b:7b:38:51:
                    55:41:40:f5:b3:87:88:28:e2:0b:b3:a8:53:b9:b3:
                    30:16:c5:bc:54:2d:27:bc:d4:34:fe:a5:a9:30:d6:
                    2d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3C:A3:1A:62:2A:28:01:A7:0F:95:24:B2:A5:D6:19:6B:75:2C:D2
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9016E9F6553E11ED941CB7C9F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.127.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:a7:08:c8:0f:cd:2b:5c:24:c1:ea:bf:0d:c8:ec:41:b3:8e:
         4a:75:d9:37:f1:51:0d:71:6b:a7:5e:e1:b4:2c:46:62:c7:c2:
         c6:06:f5:be:ad:cc:be:41:6d:1a:95:86:7c:97:fd:69:69:bd:
         0e:59:9a:df:36:0a:4c:86:56:40:51:ee:30:c7:a6:8a:87:0a:
         7a:34:63:ca:e9:31:f8:a4:1a:6c:8c:eb:f7:27:f6:a0:84:2d:
         71:0d:da:58:f5:44:6b:5b:cc:98:c1:7f:ae:7b:32:4c:79:ed:
         93:7f:bd:80:32:3d:84:f3:fe:b4:20:1b:96:74:37:ec:f2:4e:
         eb:56:77:1d:b4:e5:93:39:da:af:24:78:77:fa:e7:54:10:41:
         f8:65:8b:ba:89:0b:97:45:c2:b6:6d:8e:ad:ad:e8:a5:62:85:
         b6:a6:1d:90:79:54:58:ca:8e:0c:3a:9f:7d:5c:de:a4:e6:02:
         bf:c0:69:32:a5:32:64:56:7e:4b:b3:31:d9:16:0e:f2:fc:69:
         a0:3a:ca:7e:8e:e2:ed:ed:e0:ee:7b:87:8c:52:67:2c:e0:f4:
         3d:12:5c:cb:17:c2:1e:cf:4b:28:9a:b0:9a:18:2e:52:03:2d:
         97:92:49:53:de:7f:07:78:c9:c4:28:5b:9f:b3:24:c6:68:35:
         6f:98:aa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org